CVE-2026-19873

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...

CVE-2026-19873

HTML::FormFu for Perl (versions through 2.08 ) allows resource exhaustion via an unbounded repeat count read from the query string by Repeatable elements with a counter_name set. The process method deep-clones the child subtree once per iteration with no upper bound, and the count is read on ever...